Technical Information
- '%APPDATA%\JUJL6Z8CD0IZ\EI.exe' e "%APPDATA%\TJT02JFL0UUL\RNATVL.zip" -p"102030" -o"%APPDATA%\TJT02JFL0UUL\"
- '' (downloaded from the Internet)
- %APPDATA%\JUJL6Z8CD0IZ\EI.exe
- %APPDATA%\TJT02JFL0UUL\RNATVL.zip
- 'www.du##bda.com':80
- 'eg##ard.com':80
- http://www.du##bda.com/textes/top/7z.exe
- http://eg##ard.com/another/xalit1.zip
- DNS ASK www.du##bda.com
- DNS ASK eg##ard.com